LLMHigh
CVE-2025-71372: Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __r…
- Occurred
- Jul 4, 2026
- Published
- Jul 4, 2026
- Source
- NVD CVE
Summary
Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickle __reduce__ methods, allowing arbitrary code execution. Attackers can craft malicious pickle files that execute arbitrary Python code when loaded, bypassing Picklescan's safety checks and enabling supply-chain poisoning of shared model files.
Tags
- CVE
- CVE-2025-71372
- cvss:HIGH
Classification
Category confidence: 85%
Severity confidence: 90%
Rationale: Vulnerability in AI safety tool enabling arbitrary code execution via malicious pickle files in model supply chain.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8